Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/0aefba22-a48d-39ee-9ba4-71f1082b09d7.roa
File:                     0aefba22-a48d-39ee-9ba4-71f1082b09d7.roa (raw, json)
Hash identifier:          vxIJPtOGt862gGPwy/FGT5o1owQfCb7xMGwnIgIGr28=
Subject key identifier:   2D:B4:14:1E:F7:2F:6F:F3:AA:93:69:9E:F6:E6:29:C7:35:9E:3F:FE
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F4328584773965C64EE841369677B6070
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/0aefba22-a48d-39ee-9ba4-71f1082b09d7.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     398427
IP address blocks:        185.172.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:5c:64:ee:84:13:69:67:7b:60:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=c979e6d1-6e9f-4dd3-ae68-388c9d7069d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0f:33:06:6a:b3:f2:91:22:4b:85:ad:0e:12:
                    6b:48:82:9b:22:1f:73:b2:17:f4:fc:75:51:2f:c4:
                    7d:d2:6d:34:ae:fb:af:a8:5e:a5:1f:6a:ae:6c:56:
                    1e:7f:27:78:37:3a:a0:d6:10:9e:64:6e:38:d6:d8:
                    56:3f:f2:91:88:cb:1e:e2:bb:f3:72:48:99:4f:bb:
                    ac:8d:19:8b:6a:54:ac:e9:38:ba:1e:e8:c6:6b:64:
                    14:6c:ab:9a:f7:4b:6c:fd:d9:8f:5b:46:08:61:57:
                    1a:14:67:16:79:b1:3e:c9:f2:75:f1:37:c0:45:6c:
                    96:4e:be:42:20:2f:9e:e0:ca:78:b9:78:ab:7f:ff:
                    47:cb:b2:72:5a:a1:25:87:5a:54:b5:48:08:35:a1:
                    cf:a4:c8:35:13:e8:6b:38:d4:e8:b6:5a:d3:12:fe:
                    a7:49:6e:d1:bd:f0:0a:88:1c:c0:cb:39:cc:36:f3:
                    3f:e8:ef:49:22:d0:44:f1:9e:1f:39:7a:fa:e6:44:
                    5c:c9:9f:bc:79:4a:e7:b7:a1:2c:e8:0b:38:18:32:
                    f5:9d:bf:fc:8d:af:ec:a1:9f:a2:09:af:56:4a:20:
                    96:15:1a:ab:36:a9:56:71:91:1b:33:c1:fd:60:09:
                    aa:68:74:69:b3:fe:4e:45:6c:13:be:fd:40:69:64:
                    d4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B4:14:1E:F7:2F:6F:F3:AA:93:69:9E:F6:E6:29:C7:35:9E:3F:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/0aefba22-a48d-39ee-9ba4-71f1082b09d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.172.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:53:8f:e6:77:08:39:3d:19:a2:75:5e:2a:6b:6d:6b:b7:7f:
         a4:24:5d:b4:b5:12:c8:ba:c5:3b:63:99:f0:f7:e3:97:15:5c:
         23:c6:24:0b:d4:92:b4:2f:44:ee:93:fb:df:98:fb:77:e4:2e:
         5a:de:72:e3:78:9f:b9:3c:d8:77:e0:4f:6f:4f:9f:62:47:a3:
         d3:79:5e:ed:bc:3d:82:2d:12:6e:63:67:ce:1c:6a:3d:72:18:
         af:6a:d7:72:83:ad:da:47:6e:86:2a:54:25:66:26:f6:6f:d0:
         ef:05:f4:99:76:6f:79:0d:f9:a8:d6:79:d3:58:f6:01:8c:b7:
         de:06:26:41:a4:98:99:70:bf:81:9f:2f:4d:05:a6:61:7f:34:
         9e:5f:5d:bf:db:24:ae:62:a1:00:81:59:8f:6e:2e:b3:a3:35:
         52:fa:56:08:c0:d6:e6:9e:e0:4d:70:be:66:5e:e3:ad:28:64:
         2c:81:29:9e:c2:e1:b7:be:37:2e:77:a4:00:48:c8:35:90:99:
         31:7e:e6:04:29:9f:40:42:77:c7:81:2a:fc:3c:1e:5d:63:d9:
         50:c9:40:aa:f4:d1:63:3f:a9:ae:2f:f2:4a:45:23:7a:26:da:
         a7:27:34:0f:77:88:ca:7e:3a:41:67:b5:26:0c:ff:f7:ac:d5:
         9c:7d:55:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdzllxk7oQTaWd7YHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI1YzQ4ZjItYzdkZi00YzZiLWIyMTQtMmU3NDE5NTk5
OTVkMB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
Yzk3OWU2ZDEtNmU5Zi00ZGQzLWFlNjgtMzg4YzlkNzA2OWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg8zBmqz8pEiS4WtDhJrSIKbIh9zshf0/HVR
L8R90m00rvuvqF6lH2qubFYefyd4Nzqg1hCeZG441thWP/KRiMse4rvzckiZT7us
jRmLalSs6Ti6HujGa2QUbKua90ts/dmPW0YIYVcaFGcWebE+yfJ18TfARWyWTr5C
IC+e4Mp4uXirf/9Hy7JyWqElh1pUtUgINaHPpMg1E+hrONTotlrTEv6nSW7RvfAK
iBzAyznMNvM/6O9JItBE8Z4fOXr65kRcyZ+8eUrnt6Es6As4GDL1nb/8ja/soZ+i
Ca9WSiCWFRqrNqlWcZEbM8H9YAmqaHRps/5ORWwTvv1AaWTUbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC20FB73L2/zqpNpnvbmKcc1nj/+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVj
NDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0MTk1OTk5NWQvMGFlZmJhMjItYTQ4ZC0z
OWVlLTliYTQtNzFmMTA4MmIwOWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjI1YzQ4ZjItYzdkZi00YzZiLWIy
MTQtMmU3NDE5NTk5OTVkL2YyNWM0OGYyLWM3ZGYtNGM2Yi1iMjE0LTJlNzQxOTU5
OTk1ZC5jcmwwHwYDVR0jBBgwFoAU+sfScWviPZWQVIfGlXYdIfhQmnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVjNDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0
MTk1OTk5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuay+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGVTj+Z3CDk9GaJ1XiprbWu3f6QkXbS1Esi6xTtjmfD345cVXCPGJAvU
krQvRO6T+9+Y+3fkLlrecuN4n7k82HfgT29Pn2JHo9N5Xu28PYItEm5jZ84caj1y
GK9q13KDrdpHboYqVCVmJvZv0O8F9Jl2b3kN+ajWedNY9gGMt94GJkGkmJlwv4Gf
L00FpmF/NJ5fXb/bJK5ioQCBWY9uLrOjNVL6VgjA1uae4E1wvmZe460oZCyBKZ7C
4be+Ny53pABIyDWQmTF+5gQpn0BCd8eBKvw8Hl1j2VDJQKr00WM/qa4v8kpFI3om
2qcnNA93iMp+OkFntSYM//es1Zx9VVU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:44:24 2024 by rpki-client on console-ams.rpki-client.org